CVE-2022-2585: Use After Free
A use-after-free flaw was found in the Linux kernel’s POSIX CPU timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Other sources
It was discovered that when exec'ing from a non-leader thread armed POSIX CPU timers would be left on a list but freed leading to a use-after-free.
— Microsoft
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-after-free.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 0:5.14.0-70.30.1.el9_0 - Upgrade
Upgrade
redhat/kernel-rtto a version that resolves this vulnerability.Fixed in 0:5.14.0-70.30.1.rt21.102.el9_0 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.0 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.107-1Fixed in 7.1.12-1Fixed in 7.1.13-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2022-2585?
CVE-2022-2585 is considered to have a high severity due to its potential for privilege escalation and system crashes.
How do I fix CVE-2022-2585?
To address CVE-2022-2585, update your kernel to the latest available version as specified in the vulnerability report.
Which systems are vulnerable to CVE-2022-2585?
CVE-2022-2585 affects various versions of the Linux kernel, specifically versions between 5.7 and 5.19.
Can CVE-2022-2585 be exploited remotely?
CVE-2022-2585 requires local access for exploitation, making it less of a remote threat but still critical for local users.
Is there a workaround for CVE-2022-2585?
Currently, the recommended approach is to apply the latest patches instead of relying on any workarounds for CVE-2022-2585.